I have an Ubuntu Server 18.04 domain member joined to Active Directory. Everything is working well, except for getting the AD User must change password at next login setting to be respected.
I want to force new users to change their temporary passwords upon first login, and this checkbox seems like the easiest way to do that. But when new users login, nothing happens. They just enter the session as normal and are not asked to make a new password.
I feel like there is a PAM setting for this, but I haven't been able to find it.